Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/NGkgR_rl3fLugEg3BgzB-iR4GzY.roa
File: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (raw, json)
Hash identifier: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=
Subject key identifier: 34:69:20:47:FA:E5:DD:F2:EE:80:48:37:06:0C:C1:FA:24:78:1B:36
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019493CDE61CD0B1D34AFE639AA9F43BADF0
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/NGkgR_rl3fLugEg3BgzB-iR4GzY.roa
Signing time: Thu 23 Jan 2025 15:35:31 +0000
ROA not before: Thu 23 Jan 2025 15:35:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213979
IP address blocks: 45.87.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:cd:e6:1c:d0:b1:d3:4a:fe:63:9a:a9:f4:3b:ad:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jan 23 15:35:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34692047fae5ddf2ee804837060cc1fa24781b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:91:a4:70:1f:2b:0a:aa:ed:1c:98:7b:34:
13:50:4b:06:64:d5:df:65:25:5f:17:00:56:43:e7:
79:ef:ab:b2:5a:bc:82:67:fc:58:08:cf:aa:c2:8a:
62:18:de:16:89:06:fd:2c:3a:54:57:34:c0:76:fa:
11:4c:f0:fd:19:2a:b0:c3:36:69:69:02:68:5a:b3:
d4:fc:e5:2a:fb:e6:40:7e:14:80:82:83:50:b9:6d:
34:9a:81:32:0c:0b:fa:73:13:58:a4:bf:83:63:e4:
09:6b:a1:5c:8b:bd:cd:41:bc:f6:a9:8c:4e:4b:f6:
45:25:9a:ce:57:0f:63:82:b9:c9:ea:08:40:ed:b3:
ff:63:35:b1:80:10:77:cd:94:b5:bc:d5:3c:1a:6b:
38:57:45:97:5b:d5:60:87:8a:62:af:2f:5c:34:e2:
0e:ac:b6:03:36:7e:e4:2b:8d:77:e3:84:6b:9d:74:
d1:8a:9d:b4:b7:ed:5f:fe:3f:32:05:1f:2f:40:7b:
a5:af:1f:48:5a:1e:2d:83:64:a3:97:0a:a6:2b:ef:
89:a0:01:5a:6b:3b:ea:0d:82:5c:ac:df:f0:09:ef:
b5:5a:03:92:7a:71:5d:d5:e4:65:f8:1a:d1:96:1b:
94:99:12:d9:45:38:90:08:48:94:3b:8b:d2:ea:97:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:20:47:FA:E5:DD:F2:EE:80:48:37:06:0C:C1:FA:24:78:1B:36
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/NGkgR_rl3fLugEg3BgzB-iR4GzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.89.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:18:b3:13:33:39:45:db:40:df:e6:95:d7:8c:da:92:c2:e1:
9d:a9:8c:82:c6:78:ea:32:51:ca:43:02:f6:9f:9b:04:bc:c7:
af:99:32:76:00:3e:4e:2f:4a:0b:8f:44:8e:cc:2d:ab:2d:04:
f4:a7:8b:7e:e8:d8:04:2e:81:58:0e:5c:2c:c2:f4:33:d0:b7:
58:fe:0f:26:30:64:f8:69:47:85:ee:44:1d:49:64:da:e3:a7:
5f:6e:70:bc:30:2a:3b:36:e1:7b:95:07:71:51:a4:d5:4f:7b:
d2:21:ae:28:31:f3:45:ca:a8:82:58:11:17:63:3d:85:c4:c9:
d4:15:07:4c:32:e3:a5:f9:76:86:bb:37:c9:14:f2:d9:5b:fd:
bb:ab:82:b9:4f:14:56:08:25:7c:d3:13:f2:9c:ea:51:ce:87:
41:df:c5:08:f9:36:04:8b:6c:14:d9:1b:20:30:de:5a:12:73:
23:b3:33:54:3a:a1:e6:51:34:6c:5f:31:30:d4:8c:74:8f:5c:
71:e8:d0:ea:bf:d1:15:ed:d0:0c:be:a5:4d:c7:25:5f:37:57:
6d:17:8c:d7:fe:7a:2c:17:07:6e:a1:35:8d:34:bf:0a:e6:e7:
ce:e0:46:78:14:4a:7c:31:dc:ed:bc:5f:0a:80:dd:57:9a:28:
4e:e9:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:25 2025 by rpki-client